Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
File:                     BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json)
Hash identifier:          TxLOYBTmu/v7SWZA+eQqVy3DMxlxQXEC/E5GrA/PMvA=
Subject key identifier:   94:B4:04:10:8F:1F:76:29:07:C0:20:B8:6A:3C:11:76:3F:A6:65:FF
Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
Certificate issuer:       /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
Certificate serial:       1372
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
Manifest number:          135A
Signing time:             Tue 22 Sep 2026 16:54:27 +0000
Manifest this update:     Tue 22 Sep 2026 16:54:26 +0000
Manifest next update:     Tue 29 Sep 2026 16:54:26 +0000
Files and hashes:         1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: orbX6qDrRWj8A/mKAi3uiXu4AXFtV5dT/AK5eLbZ09I=)
                          2: 35615A30C84511ED90A61540C4F9AE02.roa (hash: ikwRwX6HznSAvB0gllaQ7OaCqCsraBq8/S0KLelO+q8=)
                          3: 3489528EC84511ED90A61540C4F9AE02.roa (hash: IAHu/i87YCurf7TsutZ4NJzzxkW8+ff7z519ukOdfYo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl
                          rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 16:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4978 (0x1372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
        Validity
            Not Before: Sep 22 16:54:26 2026 GMT
            Not After : Sep 29 16:54:26 2026 GMT
        Subject: CN=6ab2b2c3-5072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:9c:40:1a:ec:b7:2c:cd:84:32:15:92:e7:
                    30:42:40:70:08:09:8e:74:ff:62:14:fe:2c:11:62:
                    96:90:d8:7e:15:be:9a:b5:f4:3d:da:0d:47:f7:6e:
                    05:af:51:e0:35:b0:f1:d7:01:21:84:6d:b2:99:db:
                    26:a7:00:81:d5:c0:39:ca:f8:27:f7:c3:57:cf:7d:
                    84:03:93:e3:d6:85:e7:ae:fd:01:08:d6:5a:13:98:
                    7a:8e:af:9e:c8:10:f9:ed:a1:e4:b5:ed:7f:92:58:
                    ed:2d:51:a0:9f:14:09:d8:13:b6:a7:37:be:11:e5:
                    1c:23:d3:b8:52:80:42:f9:7e:cd:8c:7b:86:33:d0:
                    af:ef:fa:48:63:13:4a:b0:f9:4e:3b:63:2d:90:59:
                    05:28:f6:5b:45:07:9d:87:e1:eb:f6:15:c6:96:75:
                    4c:03:de:35:51:e3:ad:3b:23:6c:99:5d:cc:24:13:
                    55:17:03:36:be:13:82:aa:91:f5:18:33:0b:58:23:
                    e1:3c:53:6a:69:85:b5:04:61:54:32:7d:13:40:6d:
                    10:0a:dd:83:83:fc:ea:54:29:21:2b:8b:83:61:00:
                    7e:1e:80:b9:72:84:11:68:70:48:80:83:e5:68:78:
                    27:ac:dd:9a:6b:79:e4:f4:83:2f:19:10:f8:3b:e5:
                    df:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B4:04:10:8F:1F:76:29:07:C0:20:B8:6A:3C:11:76:3F:A6:65:FF
            X509v3 Authority Key Identifier:
                keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:7b:6b:a3:ea:04:e6:4b:b9:1b:51:f7:1b:83:3d:d9:9d:28:
         00:6c:ad:b5:54:d8:46:ff:97:5f:92:b5:ac:da:60:19:8e:2a:
         61:9a:12:a4:48:cd:d8:fb:77:62:84:46:94:05:92:3b:df:f5:
         e0:3a:36:cb:c6:f0:83:c4:40:b2:12:32:9b:d5:08:2b:7c:3b:
         83:b3:32:5d:dc:a5:c0:b6:76:fa:46:74:e5:37:da:1c:6f:8b:
         35:e1:db:23:8d:37:30:02:4b:7b:fe:36:be:82:5e:64:41:f5:
         bb:a7:ca:01:65:c1:51:2f:b0:8e:1a:25:0e:51:71:b9:3d:fd:
         8c:2d:b5:bd:07:3d:6c:f5:83:12:d5:84:f2:cd:fe:1e:f1:d5:
         30:38:44:6d:f5:fa:d2:eb:8e:70:1c:50:29:1c:56:dd:5c:a6:
         bb:00:68:b1:6d:2e:81:76:83:8e:f6:38:c7:11:70:5b:11:9b:
         c2:cd:34:47:e0:83:ec:6c:13:49:3d:92:07:f0:28:02:15:d4:
         f6:cf:85:e3:50:94:07:40:a9:eb:7d:47:a9:24:5f:67:6b:06:
         9e:4f:87:4a:07:c1:c1:b8:8a:16:e3:5d:51:0a:26:34:25:bc:
         19:22:bb:9d:3d:f6:57:72:c2:7b:ed:89:54:64:27:75:53:3d:
         39:27:87:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU4RUIxMTAvBgNVBAUTKDA0N0I4QjI5NTRDNDdBQjE1QzU3NTg2REQwMDRFQjg5
Mzk3N0M1QUYwHhcNMjYwOTIyMTY1NDI2WhcNMjYwOTI5MTY1NDI2WjAYMRYwFAYD
VQQDEw02YWIyYjJjMy01MDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuL+cQBrstyzNhDIVkucwQkBwCAmOdP9iFP4sEWKWkNh+Fb6atfQ92g1H924F
r1HgNbDx1wEhhG2ymdsmpwCB1cA5yvgn98NXz32EA5Pj1oXnrv0BCNZaE5h6jq+e
yBD57aHkte1/kljtLVGgnxQJ2BO2pze+EeUcI9O4UoBC+X7NjHuGM9Cv7/pIYxNK
sPlOO2MtkFkFKPZbRQedh+Hr9hXGlnVMA941UeOtOyNsmV3MJBNVFwM2vhOCqpH1
GDMLWCPhPFNqaYW1BGFUMn0TQG0QCt2Dg/zqVCkhK4uDYQB+HoC5coQRaHBIgIPl
aHgnrN2aa3nk9IMvGRD4O+Xf2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJS0BBCP
H3YpB8AguGo8EXY/pmX/MB8GA1UdIwQYMBaAFAR7iylUxHqxXFdYbdAE64k5d8Wv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RThFQi9EMDM5RjhENkQx
QkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVyRmNWMWh0MEFUcmlUbDN4
YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JIdUxLVlRFZXJGY1YxaHQwQVRyaVRsM3hhOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RThFQi9EMDM5RjhENkQxQkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVy
RmNWMWh0MEFUcmlUbDN4YTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0Htro+oE5ku5G1H3G4M92Z0oAGyttVTYRv+XX5K1rNpgGY4qYZoSpEjN2Pt3
YoRGlAWSO9/14Do2y8bwg8RAshIym9UIK3w7g7MyXdylwLZ2+kZ05TfaHG+LNeHb
I403MAJLe/42voJeZEH1u6fKAWXBUS+wjholDlFxuT39jC21vQc9bPWDEtWE8s3+
HvHVMDhEbfX60uuOcBxQKRxW3VymuwBosW0ugXaDjvY4xxFwWxGbws00R+CD7GwT
ST2SB/AoAhXU9s+F41CUB0Cp631HqSRfZ2sGnk+HSgfBwbiKFuNdUQomNCW8GSK7
nT32V3LCe+2JVGQndVM9OSeHmQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:07:48 2026 by rpki-client